To meet the high-security requirements described in the scenario, you need to address two specific objectives:
Prevent unauthorized switches from joining the fabric - this requires Fabric Binding.
Automatically learn WWPNs and prevent rogue devices from connecting - this requires Port Security.
fabric-binding activate vsan 50 force
- Enables Fabric Binding for VSAN 50.
- Ensures that only predefined switches can join the fabric, preventing unauthorized switches.
- The force keyword activates it even if the switch is already part of the fabric.
port-security enable
port-security activate vsan 50
- Enables Port Security, which allows the switch to learn WWPNs dynamically upon first connection and prevents unknown devices from connecting to the port.